OSForensics Editor's Review

OSForensics is a collection of diagnostic tools that will provide a complete report about your computer configuration, files stored and activity. From just searching for files to create and compare hash results, OS Forensics is a complete solution for any system engineer or simple user.

The application comes with no HELP support, but with a logical interface setup and an interactive notification system which is able to give you all the information you need for each function or option. All the features are arranged in a column on the left side of the program window, with each function screen active on right side. In case you run the program for the first time, you will find all the necessary information to start using it in the first 'Start' tab from which you can start, organize and record every activity.

One of the most important features from OSForensics is the Recent Activity monitor which can scan any of your local drives and provide information regarding latest activities, from accessed and modified files to login accounts. The report can be viewed either in a list or in a timeline graph. There is also an index search function which is based on a list of indexes which can be created only manually. The creation of the indexes list is a slow process but once completed will boost significantly the search speed to an almost instant level.

OSForensics is also a great tool for detecting threats by using the mismatch search function which will detect any file that has a renamed extension, or the hash creator based on which you can compare the integrity of a single file. As an additional but useful feature, OSForensics also offers a memory activity viewer but also a system information viewer which will provide an in-depth overview of your hardware configuration. The recoveyr deleted files is another extra feature that provides a list of deleted files which can eventually recovered, as the chances to get a deleted file once the sector was re-written are low.

The portable aspect has not been forgotten. You can install the portable version of this program on any USB stick. In order to obtain a secure portable device OSForensics also offers a drive preparation mode which checks the reliability of the device, zero all the bytes and performs a format.

Pluses: comprehensive toolkit, detailed informations regarding the system's configuration, fast search function once you have the indexes list created, easy to use regardless the lack of any tutorial;

Drawbacks/flaws: lack of any documentation, case system not very clear, some features are unstable revealing its beta nature;

In conclusion: OSForensics is a free and comprehensive diagnostic tool that can provide in-depth informations regarding your hardware configuration, processes and access activity.